Enable PFS for Linux IPSec

This commit is contained in:
Mykola Baibuz 2025-02-07 12:58:37 +02:00
parent b5cbcc5f2a
commit f47e4cb729

View file

@ -21,6 +21,7 @@ conn ikev2-vpn
rightsendcert=never
eap_identity=%identity
encapsulation=yes
pfs=yes
ike=aes256-sha256-modp2048,aes256-sha1-modp1024,3des-sha1-modp1024
esp=aes256-sha256,aes256-sha1,3des-sha1